Muscat, Sultanate of Oman Sun–Thu · 9:00–18:00 GST info@thegrace.company
Services

Everything we do, in one place

Every service is scoped in plain language, priced before work starts, and delivered by senior consultants.

Compliance & StandardsImplementation & ConsultingAudit ServicesInternal & External AuditsSecurity AssessmentTechnical & Risk AssessmentProgram DevelopmentSecurity & Policy DevelopmentAdvisory ServicesStrategic ConsultingSpecialized SecurityIndustry Solutions

Compliance & Standards Implementation

Comprehensive consulting services for international standards and industry-specific frameworks

ISO Standards Consulting

ISO 27001 Information Security Management System (ISMS)Details ISO 27701 Privacy Information Management System (PIMS)Details ISO 20000 Information Technology Service Management (ITSM)Details ISO 42001 AI Management SystemDetails ISO 22301 Business Continuity ManagementDetails ISO 31000 Risk Management FrameworkDetails ISO 9001 Quality Management System (QMS)Details Develop control self-assessment (CSA) based on ISO management system standardsDetails

Industry-Specific Frameworks

NIST Cybersecurity Framework ImplementationDetails CIS Controls ImplementationDetails SOC 2 Compliance ReadinessDetails GDPR Compliance Assessment and ImplementationDetails Oman PDPL Compliance Assessment and ImplementationDetails

Audit Services

Independent internal audits and hands-on support through external certification audits

Internal Audit

ISMS internal audits (ISO 27001, 27701, 20000, 22301)Details Audit programme development and planningDetails Control self-assessment executionDetails Corrective action tracking and follow-upDetails

External Audit Support

Certification audit preparationDetails Evidence readiness reviewDetails Auditor liaison and response managementDetails Post-audit remediation planningDetails

Security Assessment

Technical testing and risk assessment with prioritised, plain-language reporting — not a scanner dump

Technical Assessment

Vulnerability assessmentsDetails Penetration testingDetails Configuration & cloud security reviewsDetails Social engineering assessmentsDetails

Risk Assessment

Enterprise security risk assessmentDetails Business impact analysisDetails Third-party / vendor risk assessmentDetails Security maturity assessment (NIST CSF, CIS benchmarks)Details

Program Development

Building the policies, plans and habits that turn security from a document into a practice

Policy & Documentation

Security policy and procedure developmentDetails ISMS documentation developmentDetails Data protection and privacy programme developmentDetails Access control and acceptable use standardsDetails

Programme Building

Security awareness programme design and deliveryDetails Incident response planning and tabletop exercisesDetails Business continuity and disaster recovery planningDetails Security metrics and management reportingDetails

Advisory Services

Senior security leadership without the cost of a full-time CISO — delivered by a consultant with 15+ years in the field

Virtual CISO (vCISO)

Security strategy development and executionDetails Board and executive advisoryDetails Security roadmap developmentDetails Budget planning and optimisationDetails

Strategic Guidance

Security programme oversight and quarterly posture reviewsDetails Vendor and technology selection (vendor-neutral)Details Compliance oversight and regulatory watchDetails Security organisation and role designDetails

Specialized Security

Emerging-technology governance and solutions tailored to regulated industries in the GCC

Emerging Technology

AI security governance & ISO 42001 readinessDetails AI risk assessments and LLM / vendor security reviewDetails Zero trust architecture designDetails Cloud security architecture (Microsoft 365 / Azure, AWS, Google Cloud)Details

Industry Solutions

Government and public sector securityDetails Financial services security and regulatory alignmentDetails Healthcare data protectionDetails Startup & technology company security programmesDetails

Not sure where to start?

Book a free consultation. We'll help you work out which of these you actually need — and which you don't.

Book free consultation